Your information
how we handle it

1.1 This policy applies to personal data processing activities arising from your visiting the ZekVPS website, registering/logging into an account, placing orders, using the dashboard or instances, or communicating with us.

1.2 Where a specific pop-up, order confirmation, or feature description conflicts with this policy for the same matter, the specific text applicable to that transaction or feature shall prevail. We reserve the right to make reasonable interpretations for compliance and contractual purposes, provided they do not violate mandatory law.

1.3 This policy is used together with the Terms of Service. For matters involving the boundaries of service provision, suspension/termination, and limitation of liability, the Terms of Service shall prevail.

2.1 Information you provide: contact details, identity verification materials, and communications submitted during registration/login, order placement, invoicing, support tickets, and customer service. You shall ensure the information is accurate; order failures or losses caused by false or incomplete information are your responsibility.

2.2 Information automatically generated when using the service: access and service logs, device and browser information, approximate location based on IP, operation records, technical metadata related to resources (e.g. instance ID, usage, status), and network/connection summary information necessary for contract performance, anti-fraud, and security audits.

2.3 Payment information: order amounts, payment gateway receipts, and reconciliation results are processed jointly by us and licensed payment institutions; sensitive payment details such as full card numbers are typically collected directly by payment institutions. For disputed payments or chargebacks, we may retain transaction records and identity verification results to the extent necessary for communication with payment institutions and card issuers.

2.4 You must not submit unnecessary sensitive content — such as passwords, private keys, or unmasked personal information of others — through tickets, chat, or other channels. We are not liable for leaks or compliance risks arising from such submissions.

3.1 Subject to applicable law, we may use information for the following purposes (including as necessary for forming and performing contracts, and for legitimate interest purposes), limited to what is required to achieve each purpose:

• Account setup, order fulfillment, billing, reconciliation, invoicing, and after-sales service;
• Technical support, ticket handling, and communication with you on service matters;
• Identity verification, account security, fraud prevention, abuse detection, overdue payment collection, and enforcement of the Terms of Service;
• System operations, capacity and quality analysis, product improvement, and internal statistics (data may be de-identified or aggregated for this purpose);
• Compliance with laws and regulations, cooperation with lawful requests from regulatory and judicial authorities, and processing necessary to protect significant legitimate interests such as personal safety and property;
• Sending service notices, security and compliance alerts with your consent or as permitted by law. Marketing messages will include an opt-out option where possible, but this does not affect necessary notices related to contract performance.

3.2 When we reasonably determine that continuing to process information for its original purpose conflicts with this policy or applicable law, we may adjust the scope of processing after ceasing use, anonymizing, or providing separate notice (as appropriate). To assert rights, respond to disputes, or regulatory investigations, we may retain and use relevant information beyond the original day-to-day purpose for as long as necessary.

4.1 We may use cookies, local storage, or similar technologies to maintain sessions, save language/UI preferences, perform necessary risk control and session security checks, and conduct access statistics and experience improvement.

4.2 You may manage cookies in your browser. If you refuse or delete technologies required to operate this service, you may be unable to log in, complete orders, or use certain features. This does not constitute a breach by us or automatically trigger a refund obligation (subject to the Terms of Service and order terms).

5.1 Sharing: We may provide information necessary for contract performance, anti-fraud, and compliance to authorized processors such as payment institutions, cloud computing and communications providers, and risk control and security service providers, and require them to maintain confidentiality and security obligations through contractual means. Where required by law or by a lawful request from a judicial or administrative authority, we may disclose information within the legally required scope without prior notice to you (unless disclosure itself is prohibited by law).

5.2 Transfer: If personal data is transferred due to a merger, split, asset restructuring, or business sale, the new holder may, within the scope necessary to continue providing similar services or performing existing contracts, assume the information processing relationship. We will endeavor to require the recipient to be bound by protections no less stringent than this policy, and will notify users of material changes through announcements or in-app notices as required by law.

5.3 Public disclosure: Except as required by law or as necessary to protect significant legitimate interests of the platform, other users, or the public, we will not publicly disclose your personal information. To stop clearly illegal use, we may, within the bounds permitted by law, provide the necessary summary of materials related to handling such conduct to the affected party or competent authority.

6.1 Your information may be stored in infrastructure operated by us or our partners in different jurisdictions. Given the nature of the cloud server business, by placing an order and using the service you acknowledge and agree that data may be transferred and stored outside your country or across regions for contract performance purposes (where required by applicable law, we will separately obtain consent or take alternative measures).

6.2 The datacenter region may affect where data is physically stored at the technical layer — refer to the plan details, order page, and order confirmation. We cannot commit to a permanently fixed jurisdiction for individual customers independent of public internet routing.

7.1 We retain information for as long as necessary to fulfill the purposes described in this policy. We may also retain necessary records for longer periods — as required by law or reasonably accepted in the industry — for accounting and tax, anti-money laundering and payment disputes, overdue payment collection, cooperation with administrative enforcement, and asserting rights or defending against litigation related to service contracts. Account cancellation does not automatically shorten retention to less than the statutory minimum (unless mandatory deletion is required by law).

7.2 After the retention period, we will delete, anonymize, or archive information in a non-identifiable form. Where law or regulation requires continued retention, legal requirements shall prevail.

8.1 To the extent permitted by applicable law and without conflicting with our legitimate business interests, the legal rights of third parties, or statutory obligations, you may request access, copies, correction, supplementation, deletion, withdrawal of consent (where applicable), restriction of processing, and may lodge complaints regarding your personal data.

8.2 You may submit requests via contacting us or through dashboard tickets. We reserve the right to verify identity, assess the lawfulness and necessity of the request, and respond within a reasonable period. We may lawfully decline manifestly unfounded, clearly repetitive, or technically excessive requests, or charge a reasonable fee (stated in advance and as permitted by applicable law) before fulfilling them. For information directly related to an ongoing fraud investigation, litigation, overdue payment handling, or administrative proceeding, we may defer responding until the proceeding concludes or disclosure is legally permitted.

This service is intended for users with full civil legal capacity. If you are a minor, you must read this policy and the Terms of Service with a guardian and use the service only with guardian consent. If we have reasonable grounds to believe an account requires guardian supervision without proper authorization, or there is a risk to a minor's interests, we may suspend or terminate the account and service, and delete or anonymize related information as required by applicable law.

We implement reasonable administrative and technical measures proportionate to our business scale to reduce the risk of information leakage, tampering, or loss. Please understand that no internet system can guarantee absolute security. We are not liable — absent willful misconduct or gross negligence — for losses caused by reasons outside our control, such as your device being compromised, weak passwords, sharing credentials with others, force majeure, or third-party attacks, unless mandatory law provides otherwise. When a security incident occurs that may affect your rights, we will notify you and take action in a reasonable manner as required by applicable law, and cooperate with competent authorities within the bounds of confidentiality obligations and investigative needs.

We may revise this policy from time to time. Updated versions take effect upon publication on the website (unless a statutory public notice period or separate notification via pop-up/email applies). Without reducing any mandatory rights you have already acquired under applicable law, your continued use of the service after the effective date constitutes acceptance of the revision. If you disagree, you should stop using the service and cancel/settle your account — we may handle your account and data in accordance with the Terms of Service to the extent permitted by law. Disputes caused by your failure to read announcements in time do not affect the validity of the revision for users who continue using the service.

For inquiries or rights requests related to this policy, please submit via contact us or through the channels listed in the Help Center. We may prioritize written responses via email or dashboard ticket. Requests where identity cannot be verified or that conflict with an ongoing enforcement or legal proceeding may be deferred.